hunt-http-smuggling
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as a methodology and reference guide for HTTP Request Smuggling (CL.TE, TE.CL, H2.CL, H2.TE). It includes:
- Instructional content on vulnerability detection and impact assessment.
- Example HTTP raw request payloads for manual testing.
- A suitability matrix comparing different web server versions and their known vulnerabilities.
- Basic fingerprinting commands using
curlto identify server headers. - [SAFE]: No automated script execution, remote package installations, or credential harvesting patterns were detected. The skill refers to external tools (e.g., Burp Suite extensions, smuggler.py) as resources for the user rather than automated execution routines.
Audit Metadata